CVE-2009-2459

CVE-2009-2459 concerns mimeTeX/mimetex with multiple vulnerabilities related to TeX directives (e.g., \environ, \input, \counter) disclosed for versions prior to 20090713. Connected documents confirm concrete remediation: Fedora advisories and Nessus/OpenVAS entries note updates to mimetex (e.g.,...

CVE-2009-1382

Multiple stack-based buffer overflows in mimetex.cgi in mimeTeX, when downloaded before 20090713, allow remote attackers to execute arbitrary code via a TeX file with long 1 picture, 2 circle, or 3 input tags...

CVE-2009-2459

Multiple unspecified vulnerabilities in mimeTeX, when downloaded before 20090713, have unknown impact and attack vectors related to the 1 \environ, 2 \input, and 3 \counter TeX directives...

PT-2009-1035 · Mimetex +1 · Mimetex +1

Name of the Vulnerable Software and Affected Versions: mimetex versions prior to 20090713 Description: The issue concerns multiple stack-based buffer overflows in mimetex.cgi, part of the mimeTeX package. These overflows can be triggered by a remote attacker via a TeX file containing long picture...

PT-2009-1036 · Mimetex +1 · Mimetex +1

Name of the Vulnerable Software and Affected Versions: mimetex versions prior to 20090713 Description: The issue concerns multiple unspecified vulnerabilities in mimetex. These vulnerabilities are related to the environ, input, and counter TeX directives and may allow for remote exploitation,...

DSA-1761-1 moodle - file disclosure

Bulletin has no description...

Moodle File Disclosure Vulnerability

An input filter for TeX formulas can be exploited to disclose files readable by the web server. This includes the moodle configuration file with all authentication data and server locations for directly connecting to backend database. TeX filter by default is off and in case of being activated...